Legal
Privacy Policy
This Privacy Policy explains how ISHTAR CONSULTANTS LTD (“Cure”, “we”, “us”, or “our”) collects, uses, stores, shares, and protects personal data when you use the Cure website, mobile applications, marketplace, consultation services, support services, and related services.
This policy applies to the Cure app, CureIraq app, the Cure website at https://cureiraq.com, and related Cure services.
1. Who We Are
The Services are operated by:
ISHTAR CONSULTANTS LTD
Company number: 15013410
Registered office: 26 Hillview Road, Carlton, Nottingham, England, NG4 1JX
Privacy contact: [email protected]
Support contact: [email protected]
Cure may work with healthcare professionals, clinics, pharmacies, sellers, payment processors, and delivery partners to provide the Services.
2. Important Medical Privacy Notice
Cure may process sensitive health data, including symptoms, medical history, prescriptions, uploaded medical images, consultation messages, and information about medicines or treatments.
Cure is not an emergency service. Do not use Cure for emergency medical situations. If you have urgent or severe symptoms, contact local emergency services or seek urgent in-person medical care.
3. Information We Collect
We may collect:
- Name
- Email address
- Phone number
- Account login details
- Delivery address
- Billing/order details
- Product order history
- Payment status and transaction references
- Consultation booking details
- Symptoms and health concerns
- Medical history provided by the user
- Medication and allergy information
- Prescription details if uploaded or issued
- Health-related images or documents uploaded by the user
- Messages/chat with support or healthcare providers
- Audio/video consultation data if voice/video consultation is used
- Device type, app version, IP address, diagnostics, crash logs, and security logs
- Location data only if needed for delivery/provider matching and only with permission where required
- Marketing preferences where the user opts in
If password login is used, passwords are stored securely using hashing and are never stored in plain text.
4. How We Use Data
We use data to:
- Create and manage accounts
- Provide product browsing and ordering
- Process payments, refunds, and returns
- Arrange delivery
- Book and manage consultations
- Share relevant information with healthcare professionals
- Support prescriptions or pharmacy fulfilment where applicable
- Provide customer support
- Send appointment, order, delivery, and account notifications
- Maintain safety and security
- Prevent fraud, misuse, and unauthorized access
- Comply with legal, regulatory, medical, tax, accounting, and consumer protection obligations
- Improve the Services and fix technical issues
- Send marketing only where permitted and subject to opt-out rights
5. Health Data
If you book a consultation, upload a prescription, upload medical images, or provide health information, Cure may share relevant information with healthcare professionals, pharmacies, clinics, support staff, or product providers involved in your service.
Healthcare professionals may create clinical records. Those records may be subject to medical, professional, and legal retention obligations. Cure may not be able to delete certain health, prescription, consultation, safety, or order records immediately if retention is required by law or professional standards.
6. Who We Share Data With
We may share data with:
- Healthcare professionals providing consultations
- Pharmacies, clinics, laboratories, or medical service providers
- Product sellers or suppliers
- Delivery and logistics partners
- Payment processors
- Fraud prevention and security providers
- Cloud hosting, database, and infrastructure providers
- Customer support platforms
- Analytics and crash reporting providers, if used
- Push notification providers, if used
- Email/SMS/communication providers
- Regulators, courts, law enforcement, or public authorities where required
We do not sell personal data or health data.
7. Security
We use reasonable measures to protect personal data, including HTTPS/TLS encryption in transit, access controls, authentication controls, role-based staff/provider access, logging, monitoring, and service provider checks.
No system is completely secure. Users should keep login details confidential and contact us if they suspect unauthorized access.
8. Data Retention
We keep data only for as long as needed for the Services or for legal, regulatory, medical, tax, accounting, fraud prevention, safety, dispute, or compliance reasons.
Our retention approach:
- Account data: while the account is active, then deleted/anonymised after account deletion unless retention is required.
- Order/payment records: retained as needed for tax, accounting, refund, chargeback, and legal obligations.
- Consultation, prescription, and medical records: retained as required by healthcare providers, professional standards, and applicable law.
- Support and security logs: retained for reasonable security, support, and dispute periods.
- Marketing preferences: retained until changed or withdrawn, plus suppression records as needed.
9. Account Deletion
If you create an account, you can request deletion:
- In the app:Account > Settings > Delete account
- On the web: cureiraq.com/delete-account
- By email: [email protected]
When we delete an account, we delete or anonymise personal data associated with the account unless we must retain certain information for legal, regulatory, medical, safety, tax, accounting, fraud prevention, dispute, or compliance reasons.
Temporary deactivation is not the same as account deletion.
10. Your Rights
Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your data, and to withdraw consent where processing is based on consent.
To exercise rights, contact [email protected]. We may need to verify your identity before responding.
11. Children and Minors
Cure is intended for adults aged 18 or older unless a parent or legal guardian uses the Services for a child, or Cure implements a legally reviewed minor/guardian flow.
12. Cookies and Similar Technologies
The website and app may use cookies or similar technologies for login sessions, security, preferences, analytics, performance, and marketing where permitted. See the Cookie Policy.
13. Changes
We may update this Privacy Policy from time to time. We will update the “Last updated” date and, where required, notify users of material changes.
14. Contact
Privacy contact: [email protected]
Support contact: [email protected]
Registered office: 26 Hillview Road, Carlton, Nottingham, England, NG4 1JX